Iberia discloses customer data leak after vendor security breach

Iberia notified customers that a third-party supplier was compromised, potentially exposing customer names, email addresses, and Iberia Club loyalty card numbers; the airline says login credentials and payment card data were not accessed. The disclosure follows an online claim by a threat actor offering 77 GB of purported Iberia data for sale, though it is unclear if the two events are related, and the investigation remains ongoing.